Meari
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| com.meari.sdk | 3 | – | May 11, 2026 |
| IoT Cloud Platform OpenAPI Service | 2 | – | Oct 2, 2026 |
| Alibaba OSS Hosted | 1 | – | May 11, 2026 |
| IoT Cloud MQTT Broker EMQX | 1 | – | May 11, 2026 |
Exploited and recent CVEs
- CVE-2026-96613 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service 0.2%
- CVE-2026-101104 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service 0.3%
- CVE-2026-33362 Meari SDK hardcoded cryptographic keys 0.2%
- CVE-2026-33361 Meari weak XOR obfuscation 0.2%
- CVE-2026-33359 Meari unauthenticated alert image access in cloud object storage 0.3%
- CVE-2026-33357 Meari OpenAPI device status IDOR 0.2%
- CVE-2026-33356 Meari MQTT broker missing per-device subscribe ACL 0.3%